krab-7-at[.]cc

PhishDestroy analysts have flagged krab-7-at.cc as a live giveaway scam domain that mimics legitimate prize offers in an attempt to harvest personal data and payment details from unsuspecting visitors. The site presents itself as a once-in-a-lifetime sweepstakes portal, luring users with fake notifications claiming they’ve won luxury items or large cash prizes. Once clicked through, the fraudulent portal requests sensitive information—such as shipping addresses, phone numbers, and credit card details—under the guise of completing the ‘claim process.’ Instead, this data is harvested by threat actors for identity theft, unauthorized transactions, or resale on underground markets. This domain was flagged after our automated pipeline detected zero detections on VirusTotal against its 95-definition scanner, indicating it remains undetected by many security tools as of analysis time. Technical analysis shows the domain resolves to IP address 188.114.96.3, was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on December 12, 2025, and secured with a Google Trust Services SSL certificate—tactics often used to appear legitimate. Despite the presence of a valid SSL certificate, end users should exercise extreme caution, as SSL alone does not guarantee safety. If you have visited krab-7-at.cc, immediately cease any data entry, avoid clicking any links or downloading files, and check your bank or credit card statements for unauthorized activity. Run a full antivirus scan on your device and consider changing passwords for sensitive accounts if you used the same credentials anywhere else. Report the domain to your email provider and local cybercrime unit to help block further abuse. Stay alert for follow-up phishing attempts leveraging this scam as a lure.